This update for java-1_8_0-ibm fixes the following issues :

Update to Java 8.0 Service Refresh 6 [bsc#1158442, bsc#1154212]

  - Security fixes: CVE-2019-2933 CVE-2019-2945     CVE-2019-2958 CVE-2019-2962 CVE-2019-2964 CVE-2019-2975     CVE-2019-2978 CVE-2019-2983 CVE-2019-2988 CVE-2019-2989     CVE-2019-2992 CVE-2019-2996 CVE-2019-2999 CVE-2019-2973     CVE-2019-2981 CVE-2019-17631

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-3135 advisory.

    [1:11.0.5.10-0.0.1]
    - link atomic for ix86 build (Livy Ge)

    [1:11.0.5.10-0]
    - Update to shenandoah-jdk-11.0.5+10 (GA)
    - Switch to GA mode for final release.
    - Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
    - Resolves: rhbz#1753423

    [1:11.0.5.9-0.0.ea]
    - Update to shenandoah-jdk-11.0.5+9 (EA)
    - Resolves: rhbz#1753423

    [1:11.0.5.2-0.0.ea]
    - Update to shenandoah-jdk-11.0.5+2 (EA)
    - Resolves: rhbz#1753423

    [1:11.0.5.1-0.0.ea]
    - Update to shenandoah-jdk-11.0.5+1 (EA)
    - Switch to EA mode for 11.0.5 pre-release builds.
    - Resolves: rhbz#1753423

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

Security Fix(es) :

* OpenJDK: Improper handling of Kerberos proxy credentials (Kerberos, 8220302) (CVE-2019-2949)

* OpenJDK: Unexpected exception thrown during regular expression processing in Nashorn (Scripting, 8223518) (CVE-2019-2975)

* OpenJDK: Incorrect handling of nested jar: URLs in Jar URL handler (Networking, 8223892) (CVE-2019-2978)

* OpenJDK: Incorrect handling of HTTP proxy responses in HttpURLConnection (Networking, 8225298) (CVE-2019-2989)

* OpenJDK: Missing restrictions on use of custom SocketImpl (Networking, 8218573) (CVE-2019-2945)

* OpenJDK: NULL pointer dereference in DrawGlyphList (2D, 8222690) (CVE-2019-2962)

* OpenJDK: Unexpected exception thrown by Pattern processing crafted regular expression (Concurrency, 8222684) (CVE-2019-2964)

* OpenJDK: Unexpected exception thrown by XPathParser processing crafted XPath expression (JAXP, 8223505) (CVE-2019-2973)

* OpenJDK: Unexpected exception thrown by XPath processing crafted XPath expression (JAXP, 8224532) (CVE-2019-2981)

* OpenJDK: Unexpected exception thrown during Font object deserialization (Serialization, 8224915) (CVE-2019-2983)

* OpenJDK: Missing glyph bitmap image dimension check in FreetypeFontScaler (2D, 8225286) (CVE-2019-2987)

* OpenJDK: Integer overflow in bounds check in SunGraphics2D (2D, 8225292) (CVE-2019-2988)

* OpenJDK: Excessive memory allocation in CMap when reading TrueType font (2D, 8225597) (CVE-2019-2992)

* OpenJDK: Insufficient filtering of HTML event attributes in Javadoc (Javadoc, 8226765) (CVE-2019-2999)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

Security Fix(es) :

* OpenJDK: Improper handling of Kerberos proxy credentials (Kerberos, 8220302) (CVE-2019-2949)

* OpenJDK: Unexpected exception thrown during regular expression processing in Nashorn (Scripting, 8223518) (CVE-2019-2975)

* OpenJDK: Incorrect handling of nested jar: URLs in Jar URL handler (Networking, 8223892) (CVE-2019-2978)

* OpenJDK: Incorrect handling of HTTP proxy responses in HttpURLConnection (Networking, 8225298) (CVE-2019-2989)

* OpenJDK: Missing restrictions on use of custom SocketImpl (Networking, 8218573) (CVE-2019-2945)

* OpenJDK: NULL pointer dereference in DrawGlyphList (2D, 8222690) (CVE-2019-2962)

* OpenJDK: Unexpected exception thrown by Pattern processing crafted regular expression (Concurrency, 8222684) (CVE-2019-2964)

* OpenJDK: Unexpected exception thrown by XPathParser processing crafted XPath expression (JAXP, 8223505) (CVE-2019-2973)

* OpenJDK: Unexpected exception thrown by XPath processing crafted XPath expression (JAXP, 8224532) (CVE-2019-2981)

* OpenJDK: Unexpected exception thrown during Font object deserialization (Serialization, 8224915) (CVE-2019-2983)

* OpenJDK: Missing glyph bitmap image dimension check in FreetypeFontScaler (2D, 8225286) (CVE-2019-2987)

* OpenJDK: Integer overflow in bounds check in SunGraphics2D (2D, 8225292) (CVE-2019-2988)

* OpenJDK: Excessive memory allocation in CMap when reading TrueType font (2D, 8225597) (CVE-2019-2992)

* OpenJDK: Insufficient filtering of HTML event attributes in Javadoc (Javadoc, 8226765) (CVE-2019-2999)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

The remote NewStart CGSL host, running version MAIN 4.06, has java-1.8.0-openjdk packages installed that are affected by multiple vulnerabilities:

  - Vulnerability in the Java SE, Java SE Embedded product     of Oracle Java SE (component: Concurrency). Supported     versions that are affected are Java SE: 7u231, 8u221,     11.0.4 and 13; Java SE Embedded: 8u221. Difficult to     exploit vulnerability allows unauthenticated attacker     with network access via multiple protocols to compromise     Java SE, Java SE Embedded. Successful attacks of this     vulnerability can result in unauthorized ability to     cause a partial denial of service (partial DOS) of Java     SE, Java SE Embedded. Note: This vulnerability can only     be exploited by supplying data to APIs in the specified     Component without using Untrusted Java Web Start     applications or Untrusted Java applets, such as through     a web service. CVSS 3.0 Base Score 3.7 (Availability     impacts). CVSS Vector:
    (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).
    (CVE-2019-2964)

  - Vulnerability in the Java SE, Java SE Embedded product     of Oracle Java SE (component: Scripting). Supported     versions that are affected are Java SE: 8u221, 11.0.4     and 13; Java SE Embedded: 8u221. Difficult to exploit     vulnerability allows unauthenticated attacker with     network access via multiple protocols to compromise Java     SE, Java SE Embedded. Successful attacks of this     vulnerability can result in unauthorized update, insert     or delete access to some of Java SE, Java SE Embedded     accessible data and unauthorized ability to cause a     partial denial of service (partial DOS) of Java SE, Java     SE Embedded. Note: This vulnerability applies to Java     deployments, typically in clients running sandboxed Java     Web Start applications or sandboxed Java applets (in     Java SE 8), that load and run untrusted code (e.g., code     that comes from the internet) and rely on the Java     sandbox for security. This vulnerability can also be     exploited by using APIs in the specified Component,     e.g., through a web service which supplies data to the     APIs. CVSS 3.0 Base Score 4.8 (Integrity and     Availability impacts). CVSS Vector:
    (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L).
    (CVE-2019-2975)

  - Vulnerability in the Java SE, Java SE Embedded product     of Oracle Java SE (component: JAXP). Supported versions     that are affected are Java SE: 7u231, 8u221, 11.0.4 and     13; Java SE Embedded: 8u221. Difficult to exploit     vulnerability allows unauthenticated attacker with     network access via multiple protocols to compromise Java     SE, Java SE Embedded. Successful attacks of this     vulnerability can result in unauthorized ability to     cause a partial denial of service (partial DOS) of Java     SE, Java SE Embedded. Note: This vulnerability applies     to Java deployments, typically in clients running     sandboxed Java Web Start applications or sandboxed Java     applets (in Java SE 8), that load and run untrusted code     (e.g., code that comes from the internet) and rely on     the Java sandbox for security. This vulnerability can     also be exploited by using APIs in the specified     Component, e.g., through a web service which supplies     data to the APIs. CVSS 3.0 Base Score 3.7 (Availability     impacts). CVSS Vector:
    (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).
    (CVE-2019-2973, CVE-2019-2981)

  - Vulnerability in the Java SE product of Oracle Java SE     (component: Javadoc). Supported versions that are     affected are Java SE: 7u231, 8u221, 11.0.4 and 13.
    Difficult to exploit vulnerability allows     unauthenticated attacker with network access via     multiple protocols to compromise Java SE. Successful     attacks require human interaction from a person other     than the attacker and while the vulnerability is in Java     SE, attacks may significantly impact additional     products. Successful attacks of this vulnerability can     result in unauthorized update, insert or delete access     to some of Java SE accessible data as well as     unauthorized read access to a subset of Java SE     accessible data. Note: This vulnerability applies to     Java deployments, typically in clients running sandboxed     Java Web Start applications or sandboxed Java applets     (in Java SE 8), that load and run untrusted code (e.g.,     code that comes from the internet) and rely on the Java     sandbox for security. This vulnerability does not apply     to Java deployments, typically in servers, that load and     run only trusted code (e.g., code installed by an     administrator). CVSS 3.0 Base Score 4.7 (Confidentiality     and Integrity impacts). CVSS Vector:
    (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N).
    (CVE-2019-2999)

  - Vulnerability in the Java SE, Java SE Embedded product     of Oracle Java SE (component: 2D). Supported versions     that are affected are Java SE: 7u231, 8u221, 11.0.4 and     13; Java SE Embedded: 8u221. Difficult to exploit     vulnerability allows unauthenticated attacker with     network access via multiple protocols to compromise Java     SE, Java SE Embedded. Successful attacks of this     vulnerability can result in unauthorized ability to     cause a partial denial of service (partial DOS) of Java     SE, Java SE Embedded. Note: This vulnerability applies     to Java deployments, typically in clients running     sandboxed Java Web Start applications or sandboxed Java     applets (in Java SE 8), that load and run untrusted code     (e.g., code that comes from the internet) and rely on     the Java sandbox for security. This vulnerability does     not apply to Java deployments, typically in servers,     that load and run only trusted code (e.g., code     installed by an administrator). CVSS 3.0 Base Score 3.7     (Availability impacts). CVSS Vector:
    (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).
    (CVE-2019-2988, CVE-2019-2992)

  - Vulnerability in the Java SE, Java SE Embedded product     of Oracle Java SE (component: Networking). Supported     versions that are affected are Java SE: 7u231, 8u221,     11.0.4 and 13; Java SE Embedded: 8u221. Difficult to     exploit vulnerability allows unauthenticated attacker     with network access via multiple protocols to compromise     Java SE, Java SE Embedded. Successful attacks of this     vulnerability can result in unauthorized ability to     cause a partial denial of service (partial DOS) of Java     SE, Java SE Embedded. Note: This vulnerability applies     to Java deployments, typically in clients running     sandboxed Java Web Start applications or sandboxed Java     applets (in Java SE 8), that load and run untrusted code     (e.g., code that comes from the internet) and rely on     the Java sandbox for security. This vulnerability can     also be exploited by using APIs in the specified     Component, e.g., through a web service which supplies     data to the APIs. CVSS 3.0 Base Score 3.7 (Availability     impacts). CVSS Vector:
    (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).
    (CVE-2019-2978)

  - Vulnerability in the Java SE product of Oracle Java SE     (component: 2D). Supported versions that are affected     are Java SE: 11.0.4 and 13. Difficult to exploit     vulnerability allows unauthenticated attacker with     network access via multiple protocols to compromise Java     SE. Successful attacks of this vulnerability can result     in unauthorized ability to cause a partial denial of     service (partial DOS) of Java SE. Note: This     vulnerability applies to Java deployments, typically in     clients running sandboxed Java Web Start applications or     sandboxed Java applets (in Java SE 8), that load and run     untrusted code (e.g., code that comes from the internet)     and rely on the Java sandbox for security. This     vulnerability can also be exploited by using APIs in the     specified Component, e.g., through a web service which     supplies data to the APIs. CVSS 3.0 Base Score 3.7     (Availability impacts). CVSS Vector:
    (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).
    (CVE-2019-2987)

  - Vulnerability in the Java SE, Java SE Embedded product     of Oracle Java SE (component: Serialization). Supported     versions that are affected are Java SE: 7u231, 8u221,     11.0.4 and 13; Java SE Embedded: 8u221. Difficult to     exploit vulnerability allows unauthenticated attacker     with network access via multiple protocols to compromise     Java SE, Java SE Embedded. Successful attacks of this     vulnerability can result in unauthorized ability to     cause a partial denial of service (partial DOS) of Java     SE, Java SE Embedded. Note: This vulnerability applies     to Java deployments, typically in clients running     sandboxed Java Web Start applications or sandboxed Java     applets (in Java SE 8), that load and run untrusted code     (e.g., code that comes from the internet) and rely on     the Java sandbox for security. This vulnerability can     also be exploited by using APIs in the specified     Component, e.g., through a web service which supplies     data to the APIs. CVSS 3.0 Base Score 3.7 (Availability     impacts). CVSS Vector:
    (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).
    (CVE-2019-2983)

  - Vulnerability in the Java SE, Java SE Embedded product     of Oracle Java SE (component: 2D). Supported versions     that are affected are Java SE: 7u231, 8u221, 11.0.4 and     13; Java SE Embedded: 8u221. Difficult to exploit     vulnerability allows unauthenticated attacker with     network access via multiple protocols to compromise Java     SE, Java SE Embedded. Successful attacks of this     vulnerability can result in unauthorized ability to     cause a partial denial of service (partial DOS) of Java     SE, Java SE Embedded. Note: This vulnerability applies     to Java deployments, typically in clients running     sandboxed Java Web Start applications or sandboxed Java     applets (in Java SE 8), that load and run untrusted code     (e.g., code that comes from the internet) and rely on     the Java sandbox for security. This vulnerability can     also be exploited by using APIs in the specified     Component, e.g., through a web service which supplies     data to the APIs. CVSS 3.0 Base Score 3.7 (Availability     impacts). CVSS Vector:
    (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).
    (CVE-2019-2962)

  - Vulnerability in the Java SE, Java SE Embedded product     of Oracle Java SE (component: Networking). Supported     versions that are affected are Java SE: 7u231, 8u221,     11.0.4 and 13; Java SE Embedded: 8u221. Difficult to     exploit vulnerability allows unauthenticated attacker     with network access via multiple protocols to compromise     Java SE, Java SE Embedded. Successful attacks require     human interaction from a person other than the attacker.
    Successful attacks of this vulnerability can result in     unauthorized ability to cause a partial denial of     service (partial DOS) of Java SE, Java SE Embedded.
    Note: This vulnerability applies to Java deployments,     typically in clients running sandboxed Java Web Start     applications or sandboxed Java applets (in Java SE 8),     that load and run untrusted code (e.g., code that comes     from the internet) and rely on the Java sandbox for     security. This vulnerability does not apply to Java     deployments, typically in servers, that load and run     only trusted code (e.g., code installed by an     administrator). CVSS 3.0 Base Score 3.1 (Availability     impacts). CVSS Vector:
    (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).
    (CVE-2019-2945)

  - Vulnerability in the Oracle GraalVM Enterprise Edition     product of Oracle GraalVM (component: Java). The     supported version that is affected is 19.2.0. Difficult     to exploit vulnerability allows unauthenticated attacker     with network access via multiple protocols to compromise     Oracle GraalVM Enterprise Edition. While the     vulnerability is in Oracle GraalVM Enterprise Edition,     attacks may significantly impact additional products.
    Successful attacks of this vulnerability can result in     unauthorized creation, deletion or modification access     to critical data or all Oracle GraalVM Enterprise     Edition accessible data. CVSS 3.0 Base Score 6.8     (Integrity impacts). CVSS Vector:
    (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N).
    (CVE-2019-2989)

  - Vulnerability in the Java SE, Java SE Embedded product     of Oracle Java SE (component: Kerberos). Supported     versions that are affected are Java SE: 7u231, 8u221,     11.0.4 and 13; Java SE Embedded: 8u221. Difficult to     exploit vulnerability allows unauthenticated attacker     with network access via Kerberos to compromise Java SE,     Java SE Embedded. While the vulnerability is in Java SE,     Java SE Embedded, attacks may significantly impact     additional products. Successful attacks of this     vulnerability can result in unauthorized access to     critical data or complete access to all Java SE, Java SE     Embedded accessible data. Note: This vulnerability     applies to Java deployments, typically in clients     running sandboxed Java Web Start applications or     sandboxed Java applets (in Java SE 8), that load and run     untrusted code (e.g., code that comes from the internet)     and rely on the Java sandbox for security. This     vulnerability can also be exploited by using APIs in the     specified Component, e.g., through a web service which     supplies data to the APIs. CVSS 3.0 Base Score 6.8     (Confidentiality impacts). CVSS Vector:
    (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N).
    (CVE-2019-2949)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4223-1 advisory.

    Jan Jancar, Petr Svenda, and Vladimir Sedlacek discovered that a side- channel vulnerability existed in     the ECDSA implementation in OpenJDK. An Attacker could use this to expose sensitive information.
    (CVE-2019-2894)

    It was discovered that the Socket implementation in OpenJDK did not properly restrict the creation of     subclasses with a custom Socket implementation. An attacker could use this to specially create a Java     class that could possibly bypass Java sandbox restrictions. (CVE-2019-2945)

    Rob Hamm discovered that the Kerberos implementation in OpenJDK did not properly handle proxy credentials.
    An attacker could possibly use this to impersonate another user. (CVE-2019-2949)

    It was discovered that a NULL pointer dereference existed in the font handling implementation in OpenJDK.
    An attacker could use this to cause a denial of service (application crash). (CVE-2019-2962)

    It was discovered that the Concurrency subsystem in OpenJDK did not properly bound stack consumption when     compiling regular expressions. An attacker could use this to cause a denial of service (application     crash). (CVE-2019-2964)

    It was discovered that the JAXP subsystem in OpenJDK did not properly handle XPath expressions in some     situations. An attacker could use this to cause a denial of service (application crash). (CVE-2019-2973,     CVE-2019-2981)

    It was discovered that the Nashorn JavaScript subcomponent in OpenJDK did not properly handle regular     expressions in some situations. An attacker could use this to cause a denial of service (application     crash). (CVE-2019-2975)

    It was discovered that the String class in OpenJDK contained an out-of- bounds access vulnerability. An     attacker could use this to cause a denial of service (application crash) or possibly expose sensitive     information. This issue only affected OpenJDK 11 in Ubuntu 18.04 LTS, Ubuntu 19.04, and Ubuntu 19.10.
    (CVE-2019-2977)

    It was discovered that the Jar URL handler in OpenJDK did not properly handled nested Jar URLs in some     situations. An attacker could use this to cause a denial of service (application crash). (CVE-2019-2978)

    It was discovered that the Serialization component of OpenJDK did not properly handle deserialization of     certain object attributes. An attacker could use this to cause a denial of service (application crash).
    (CVE-2019-2983)

    It was discovered that the FreetypeFontScaler class in OpenJDK did not properly validate dimensions of     glyph bitmap images read from font files. An attacker could specially craft a font file that could cause a     denial of service (application crash). (CVE-2019-2987)

    It was discovered that a buffer overflow existed in the SunGraphics2D class in OpenJDK. An attacker could     possibly use this to cause a denial of service (excessive memory consumption or application crash).
    (CVE-2019-2988)

    It was discovered that the Networking component in OpenJDK did not properly handle certain responses from     HTTP proxies. An attacker controlling a malicious HTTP proxy could possibly use this to inject content     into a proxied HTTP connection. (CVE-2019-2989)

    It was discovered that the font handling implementation in OpenJDK did not properly validate TrueType font     files in some situations. An attacker could specially craft a font file that could cause a denial of     service (excessive memory consumption). (CVE-2019-2992)

    It was discovered that the JavaDoc generator in OpenJDK did not properly filter out some HTML elements     properly, including documentation comments in Java source code. An attacker could possibly use this to     craft a Cross-Site Scripting attack. (CVE-2019-2999)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

Security Fix(es) :

* OpenJDK: Improper handling of Kerberos proxy credentials (Kerberos, 8220302) (CVE-2019-2949)

* OpenJDK: Unexpected exception thrown during regular expression processing in Nashorn (Scripting, 8223518) (CVE-2019-2975)

* OpenJDK: Incorrect handling of nested jar: URLs in Jar URL handler (Networking, 8223892) (CVE-2019-2978)

* OpenJDK: Incorrect handling of HTTP proxy responses in HttpURLConnection (Networking, 8225298) (CVE-2019-2989)

* OpenJDK: Missing restrictions on use of custom SocketImpl (Networking, 8218573) (CVE-2019-2945)

* OpenJDK: NULL pointer dereference in DrawGlyphList (2D, 8222690) (CVE-2019-2962)

* OpenJDK: Unexpected exception thrown by Pattern processing crafted regular expression (Concurrency, 8222684) (CVE-2019-2964)

* OpenJDK: Unexpected exception thrown by XPathParser processing crafted XPath expression (JAXP, 8223505) (CVE-2019-2973)

* OpenJDK: Unexpected exception thrown by XPath processing crafted XPath expression (JAXP, 8224532) (CVE-2019-2981)

* OpenJDK: Unexpected exception thrown during Font object deserialization (Serialization, 8224915) (CVE-2019-2983)

* OpenJDK: Missing glyph bitmap image dimension check in FreetypeFontScaler (2D, 8225286) (CVE-2019-2987)

* OpenJDK: Integer overflow in bounds check in SunGraphics2D (2D, 8225292) (CVE-2019-2988)

* OpenJDK: Excessive memory allocation in CMap when reading TrueType font (2D, 8225597) (CVE-2019-2992)

* OpenJDK: Insufficient filtering of HTML event attributes in Javadoc (Javadoc, 8226765) (CVE-2019-2999)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Note that Tenable Network Security has attempted to extract the preceding description block directly from the corresponding Red Hat security advisory. Virtuozzo provides no description for VZLSA advisories. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-3136 advisory.

    [1:1.8.0.232.b09-0]
    - Update to aarch64-shenandoah-jdk8u232-b09.
    - Switch to GA mode for final release.
    - Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
    - Resolves: rhbz#1753423

    [1:1.8.0.232.b08-0.0.ea]
    - Update to aarch64-shenandoah-jdk8u232-b08.
    - Resolves: rhbz#1753423

    [1:1.8.0.232.b05-0.1.ea]
    - Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09.
    - Update version logic to handle -shenandoah* tag suffix.
    - Resolves: rhbz#1753423

    [1:1.8.0.232.b05-0.0.ea]
    - Update to aarch64-shenandoah-jdk8u232-b05.
    - Resolves: rhbz#1753423

    [1:1.8.0.232.b01-0.0.ea]
    - Update to aarch64-shenandoah-jdk8u232-b01.
    - Switch to EA mode.
    - Resolves: rhbz#1753423

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Several vulnerabilities have been discovered in the OpenJDK Java runtime, resulting in cross-site scripting, denial of service, information disclosure or Kerberos user impersonation.

An update of the openjdk11 package has been released.

The version of AOS installed on the remote host is prior to 5.11.3. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-5.11.3 advisory.

  - OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated     the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8.
    (CVE-2019-5544)

  - A heap overflow flaw was found in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell     WiFi chip driver. The vulnerability allows a remote attacker to cause a system crash, resulting in a     denial of service, or execute arbitrary code. The highest threat with this vulnerability is with the     availability of the system. If code execution occurs, the code will run with the permissions of root. This     will affect both confidentiality and integrity of files on the system. (CVE-2019-14901)

  - In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy     blacklists and session PAM modules, and can cause incorrect logging, by invoking sudo with a crafted user     ID. For example, this allows bypass of !root configuration, and USER= logging, for a sudo -u     \#$((0xffffffff)) command. (CVE-2019-14287)

  - Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being improperly     sanitized before being copied into memory and used. This vulnerability affects Firefox ESR < 60.8, Firefox     < 68, and Thunderbird < 60.8. (CVE-2019-11729)

  - When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller than the     block size, a small out of bounds write could occur. This could have caused heap corruption and a     potentially exploitable crash. This vulnerability affects Thunderbird < 68.3, Firefox ESR < 68.3, and     Firefox < 71. (CVE-2019-11745)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AOS installed on the remote host is prior to 5.11.2.1. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-5.11.2.1 advisory.

  - In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy     blacklists and session PAM modules, and can cause incorrect logging, by invoking sudo with a crafted user     ID. For example, this allows bypass of !root configuration, and USER= logging, for a sudo -u     \#$((0xffffffff)) command. (CVE-2019-14287)

  - A denial of service vulnerability was found in rsyslog in the imptcp module. An attacker could send a     specially crafted message to the imptcp socket, which would cause rsyslog to crash. Versions before 8.27.0     are vulnerable. (CVE-2018-16881)

  - Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking).
    Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221.
    Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple     protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a     person other than the attacker. Successful attacks of this vulnerability can result in unauthorized     ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This     vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start     applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that     comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to     Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an     administrator). (CVE-2019-2945)

  - Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Kerberos). Supported     versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to     exploit vulnerability allows unauthenticated attacker with network access via Kerberos to compromise Java     SE, Java SE Embedded. While the vulnerability is in Java SE, Java SE Embedded, attacks may significantly     impact additional products. Successful attacks of this vulnerability can result in unauthorized access to     critical data or complete access to all Java SE, Java SE Embedded accessible data. Note: This     vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start     applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that     comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be     exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the     APIs. (CVE-2019-2949)

  - Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported     versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to     exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to     compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized     ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This     vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start     applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that     comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be     exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the     APIs. (CVE-2019-2962)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
132704	SUSE SLES12 Security Update : java-1_8_0-ibm (SUSE-SU-2020:0024-1)	Nessus	SuSE Local Security Checks	1/8/2020	4/1/2024	critical
180862	Oracle Linux 8 : java-11-openjdk (ELSA-2019-3135)	Nessus	Oracle Linux Local Security Checks	9/7/2023	10/22/2024	medium
130178	CentOS 7 : java-1.8.0-openjdk (CESA-2019:3128)	Nessus	CentOS Local Security Checks	10/24/2019	5/18/2022	medium
130179	CentOS 6 : java-1.8.0-openjdk (CESA-2019:3136)	Nessus	CentOS Local Security Checks	10/24/2019	5/18/2022	medium
131774	NewStart CGSL MAIN 4.06 : java-1.8.0-openjdk Multiple Vulnerabilities (NS-SA-2019-0213)	Nessus	NewStart CGSL Local Security Checks	12/6/2019	5/18/2022	medium
132240	Ubuntu 16.04 LTS / 18.04 LTS : OpenJDK vulnerabilities (USN-4223-1)	Nessus	Ubuntu Local Security Checks	12/18/2019	8/27/2024	medium
144021	Virtuozzo 7 : java-1.8.0-openjdk / etc (VZLSA-2019-3128)	Nessus	Virtuozzo Local Security Checks	12/10/2020	5/11/2022	medium
130040	Oracle Linux 6 : java-1.8.0-openjdk (ELSA-2019-3136)	Nessus	Oracle Linux Local Security Checks	10/18/2019	10/22/2024	medium
130134	Debian DSA-4546-1 : openjdk-11 - security update	Nessus	Debian Local Security Checks	10/22/2019	4/17/2024	medium
136109	Photon OS 1.0: Openjdk11 PHSA-2020-1.0-0290	Nessus	PhotonOS Local Security Checks	4/29/2020	3/14/2024	critical
164602	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-5.11.3)	Nessus	Misc.	9/1/2022	7/22/2025	critical
164598	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-5.11.2.1)	Nessus	Misc.	9/1/2022	2/17/2025	high

Detections

Analytics

Plugins Search

critical

medium

medium

medium

medium

medium

medium

medium

medium

critical

critical

high